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Abstract 

It is shown that a classical error correcting code C = [n,k,d] which 
contains its dual, C"*" C C, and which can be enlarged to C = [n, k' > 
k + 1, d'], can be converted into a quantum code of parameters [[n, k + k' — 
n,min((i, [3d'/2])]]. This is a generalisation of a previous construction, it en- 
ables many new codes of good efficiency to be discovered. Examples based on 
classical Bose Chaudhuri Hocquenghem (BCH) codes are discussed. 
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Quantum information theory is rapidly becoming a well-established discipline. 
It shares many of the concepts of classical information theory but involves new 
subtleties arising from the nature of quantum mechanics |^. Among the central 
concepts in common between classical and quantum information is that of error 
correction, and the error correcting code. Quantum error correcting codes have 
progressed from their initial discovery p, |^ and the first general descriptions 
1^, H to broader analyses of the physical principles [§, |10|, |Tl|, and various code 



constructions |TT|, |T^, |T^, 0, |T^, |T^ . A thorough discussion of the principles of 
quantum coding theory is offered in |P , and many example codes are given, together 
with a tabulation of codes and bounds on the minimum distance for codeword length 
n up to 72 = 30 quantum bits. 

For larger n there is less progress, and only a few general code constructions 
are known. The first important quantum code construction is that of |0, |^, 0, the 
resulting codes are commonly referred to as Calderbank Shor Steane (CSS) codes. 
It can be shown that efficient CSS codes exist as n ^ oo, but on the other hand 
these codes are not the most efficient possible. I will present here a method which 
permits most CSS codes to be enlarged, without an attendant reduction in the 
minimum distance of the code. The resulting codes are therefore more efficient 
than CSS codes. The examples I will give are found to be among the most efficient 
quantum codes known, and enable some of the bounds in ^ to be tightened. The 
code construction is essentially the same as that described for Reed-MuUer codes in 



Iq] , the new feature is to understand how the method works and thus prove that it 
remains successful for a much wider class of code. After this some relevent theory of 
Bose Chaudhuri Hocquenghem (BCH) codes [1^, ^ will be given and used to 
construct a table of example quantum codes built by the new method. The codes are 
additive and pure in the nomenclature of H. A pure additive code is nondegenerate 



in the nomenclature of [13 . 



1 Quantum coding 

Following [H, the notation [[n, is used to refer to a quantum error correcting 
code for n qubits having 2^ codewords and minimum distance d. Such a code enables 
the quantum information to be restored after any set of up to \_{d — 1)/2J qubits 
has undergone errors. In addition, when d is even, d/2 errors can be detected. 
We restrict attention to the 'worst case' that any defecting qubit (ie any qubit 
undergoing an unknown interaction) might change state in a completely unknown 
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way, so all the error processes X, Z and Y = XZ must be correctable 0, ||, 



PI 



A quantum error correcting code is an eigenspace of a commutative subgroup of 
the group E of tensor products of Pauli matrices. The commutativity condition can 
be expressed [Jll], [13], |], |16] 



Hx ■ HT + Hz ■ 



0. 



(1) 



where and Hz are [n — k x n) binary matrices which together form the stabilizer 
Ti = {Hx \ Hz). All vectors {ux\uz) in the code (where Ux and Uz are ra-bit strings) 
satisfy Hx ■ Uz + Hz ■ Ux = 0. These are generated by the generator Q = {Gx \ Gz) 
which therefore must satisfy 



Hx - + Hz - G, 



0. 



(2) 



In other words Ti may be obtained from Q by swapping the X and Z parts, and 
extracting the dual of the resulting (ra + A;) x 2n binary matrix. The rows of Gx and 
Gz have length n, and the number of rows is n + /c. 

The weight of a vector {ux\uz) is the Hamming weight of the bitwise OR of Ux 
with Uz- The minimum distance d of the code C is the largest weight such that there 
are no vectors of weight < in C \ C"*", where the dual is with respect to the inner 
product {{ux\uz), {vx\vz)) = Ux - Vz + Uz - Vx- A pure code has furthermore no vectors 
of weight < d in C, apart from the zero vector. 



The CSS code construction 
Gi C G2, and form 



is to take classical codes Gi and G2 with 




n 





(3) 



where Gi and Hi are the classical generator and check matrices. The dual condition 
Gi C G2 ensures that Hi ■ H2 = H2 ■ H^ = and therefore the commutativity 
condition (P is satisfied. If Gi = [n,ki,di] and G2 = [n,k2,d2] then the minimum 
distance of the quantum code is mm{di, (^2) and the number of rows in Q is ki + k2, 
leading to quantum code parameters [[n, ki + k2 — n, min((ii, ^2)]]. 

An interesting subset of CSS codes is that given by the above construction 
starting from a classical [n, k, d] which contains its dual, leading to a quantum 
[[n, 2k — n, d]] code. 
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2 New code construction 



I will present the new construction by stating and proving the following. 

Theorem 1. Given a classical binary error correcting code C = [n,k,d] which 
contains its dual, C*-*- C C , and which can be enlarged to C = [n^k' > k + 1, d'], a 
pure quantum code of parameters [[n, /c + /c' — n, min((i, ("3(iY2])]] can be constructed. 

Proof. The generator for the quantum code is 





( D 


AD \ 




G 






K 





(4) 



where G generates the classical code C, and G and D together generate C", as does 
G and AD together (we will choose A such that D and AD generate the same set). 

The stabilizer is 





( AB 






H' 


") 




{ 


H' ) 



where H' checks the code C', so has n — k' rows, {H' , B} checks the code C, so B 
has k' — k rows, and 

A = BD^ (a^) {bD'^) (6) 

From the dual conditions specified in the theorem, H'H'^ = and H'B^ = so 
the commutativity condition (|I]) is satisified. The definition of A ensures we have 
the correct stabilizer since 

AB{ADf = BD^. (7) 

Since the number of rows in the generator is k + k', the dimension of the quantum 
code is k + k' — n. It remains to prove that the minimum distance is mm{d, \3d'/2']). 

We choose A such that D and AD generate the same set. Therefore for any 
vector {u\v) generated by {D\AD), either -u = f or wt('U + v) > d'. We choose the 
map A such that u = v never occurs (a fixed point free map). This can be achieved 
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as long as D has more than one row, by, for example, the map 



A 



f 0100 
0010 
0001 



\ 







(8) 



0000 

V 1100 



/ 



1 



To complete the proof we will show that for any non-zero vector {u\v) generated 
by wt(-u|f) > min((i, 3(i'/2) (and therefore wt(M|f) > min((i, \?,d' /2\).) 

For the non-zero vector {u\v), if either wt(M) > d or wt(f ) > d then wt('u|t') > d, 
so the conditions of the theorem are satisfied. The only remaining vectors are those 
for which both wt{u) < d and wt(f ) < d. Now, wt(M) can only be less than c? if D is 
involved in the generation of u, and wt(f ) can only be less than d if AD is involved in 
the generation of v, since G on its own generates a binary code of minimum distance 
d. However, since the map A is fixed-point free, and using the fact that D and AD 
generate the same set, the binary vector u + v is not zero and is a member of a 
distance d' code, therefore wt{u + v) > d'. We thus have the conditions {wt{u) > d', 
wt(f) > d', wt{u + v) > d'}. These are sufficient to imply that wt{u\v) > 3d'/ 2. 
For, if u and v overlap in p places, then wt{u + v) = wt{u) — p + wt{v) — p and 
wt('u|t') = wt('u) + wt(t')— p = (wt('u)+wt(t') + wt(M + t'))/2 > "id' /2. This completes 
the proof. 

The above construction was applied to Reed-MuUer codes in ||T6[. These codes are 
not very efficient (they have small k/n for given n, d) but they have the advantage of 
being easily decoded. A large group of classical codes which combine good efficiency 
with ease of decoding are the BCH codes. They include Reed Solomon codes as a 
subset. I will now derive a set of quantum error correcting codes from binary BCH 
codes using the above construction, combined with some simple BCH coding theory. 



3 Application to binary BCH codes 

Properties of BCH codes are discussed and proved in, for example, [^. A binary 
BCH code of designed distance 5 is a cyclic code of length n over GF(2) with 
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generator polynomial 



g{x) = \.c.m.{M'^''\x),M^''+^\x),...,M^^+^-^\x)} (9) 

where 

M^'\x) = n (^^-"O ' 

in which a is a primitive rath root of unity over GF(2), and Cg is a cyclotomic coset 
mod n over GF(2), defined by 

Cs = {s,2s,4s,...,2^^-'s}, (11) 

where = \Cs\ is obtained from 2™"'s = s mod n. The dimension of the code is 
k = n — deg{g{x)). From @ and (p!oD this implies k = n — J2s \ C^s\ where the sum 
ranges from s = btos = 6 + b — 2 but only includes each distinct cyclotomic coset 
once. This can also be expressed k = n — \Xc\ where Xc = CbU Cb+i U ■ ■ ■ U Cb+5-2 
is called the defining set. The minimum distance of the code is d > 6. 

The dual of a cyclic code is cyclic. Grassl et al. ||20| derive the useful criterion 
that a cyclic code contains its dual if the union of cyclotomic cosets contributing to 
g{x) does not contain both Cs and Cn-s- In other words 

{{n -i)^Xc G Xc} ^ C C. (12) 
3.1 Primitive BCH codes 

Consider first the BCH codes with n = 2^ — 1, the so-called primitive BCH codes. 
In order to find the codes which satisfy the condition (|12D, we will find the smallest 
s such that n — r E Cg for some r < s. The largest permissible designed distance 
will then he 5 = s. For even m, the choice s = 2™/^ — 1 gives 52™/^ = n — s ^ 
Cs = so this is an upper bound on s. For odd m, an upper bound is provided 
by s = 2(™+i)/2 _ I gj^pg ^i^gn s2(™-i)/2 = ^ _ (5 _ xy2. We will show that these 

upper bounds can be filled, i.e. that no smaller s leads to n — r G for r < s. 

For n = 2™ — 1, the elements of the cyclotomic cosets Cg are largest when s 
is one less than a power of 2, s = 2^ — 1. Specifically, for s = 2-^ — 1 we have 
(s2* mod n) > (r2* mod n) \fi < m,r < s. This is obvious for s2* < n and the proof 
for s2* > n is straightforward. The largest element in Cg {s = 2^ — 1) is obtained 
for the largest i such that s2* < n, giving max(Cs) = 2™ — 2™"-' = n — r where 



6 



r = 2"^~^ — 1. This element max(Cs) = n — r is the largest in the defining set Xc for 
a code of designed distance 6 = s, therefore it is only possible for Xc to contain both 
i and n — i (for any i) if it contains r and n — r, since r = 2™"-'' — 1 is the smallest 
element in its coset, and any other pairs i,n — i must have i > r. Finally, we have 
a failure of the condition (|T2]) only if r < s, that is 2"^"-' — 1 < 2^ — 1, therefore 
J > \m/2] . 

To summarise the above, we have the proved following: 

Lemma: The primitive binary BCH codes contain their duals if and only if the 
designed distance satisfies 

6 < 2^^/21 - 1 (13) 

Using the code construction of theorem 1, together with this lemma, the list of 
quantum codes in table 1 is obtained. The further property used is that BCH codes 
are nested, i.e. codes of smaller distance contain those of larger, which is obvious 
since the former can be obtained from the latter by deleting parity checks. The first 
entry for each value of n uses {C = extended BCH code} with {C = even weight 
code} to obtain a distance 3 quantum code. The codes of larger distance involve 
only BCH codes, for these a quantum code is obtained both from the unextended 
and extended versions. The parameters [[n, K, D]] given in the table are for the 
extended BCH codes (i.e. extended by an overall parity check). Using unextended 
codes leads to a further quantum code of parameters [[n — 1,K + 1,D — 1]], for 
D>3. 



3.2 Non- primitive BCH codes 

When 7^ 2™ — 1 the cyclotomic cosets mod n do not have so much structure so 
in general the only way to find if condition ([T^ ) is satisfied is to examine each coset 
individually. 



One way in which the requirement (|T2]) is not met is if Cs contains both i and 



—i mod n, which implies Cg = C^g, for some Cs C Xc- If s is the smallest element in 
Cs, then i,n — iECsii and only s,n — s G Cs, from which s2^ = —s mod n for some 
j < nis- Multiplying by 2^ we have 32"^^ = —s2^ = s mod n, therefore j = ms/2 and 
this is only possible for even m^. Furthermore, since ms>i is a factor of mi, nig can 
be even only if mi is even. This observation slightly reduces the amount of checking 
to be done. 
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The values of n in the range 1 < n < 127 for which Ci does not contain n — 1 
are { 7,15,21,23,31,35,39,45, 47,49,51,55,63,69,71,73,75,77,79,85,87,89,91,93,95,103, 
105,111,115,117,119,121,123,127}. An efficient code is obtained if one or more of 
the cosets is small, this happens for n = 21, 23, 45, 51, 73, 85, 89, 93, 105, 117 (not 
counting primitive codes). Quantum codes obtained from BCH codes with these 
values of n are listed in table 2. Further good codes exist in the range 127 < n < 511 
for n = 133, 151, 153, 155, 165, 189, 195, 217, 219, 255, 267, 273, 275, 279, 315, 337, 
341, 381, 399, 455. 



4 Efficiency 



The code parameters in tables 1 and 2 compare well with the most efficient quantum 
codes known. For example, the [[22, 5, 6]] code permits some of the lower existence 
bounds in ||^ to be raised, and the [[32, 15, 6]] and [[32, 5, 8]] codes fill lower existence 
bounds. The [[93,68,5]] code is comparable with the [[85,61,5]] code quoted in 
though the [[93,53,7]] code is not as good as [[85,53,7]] quoted in [||. Obviously 
the quantum codes based on BCH codes will be best for primitive BCH codes, so 
we expect the codes in table 1 rather than table 2 to compare best with other code 
constructions. Indeed, the distance 3 codes in table 1 are the previously known 



Hamming codes [jT3|, |I6|, ^ and are optimal 



The quantum codes constructed by theorem 1 have an upper bound on the rate 
K/n = [k + k')/n — 1 arising from the upper bound on k and k' for binary codes. 
In the asymptotic limit this bound on the quantum codes is 

K/n < R{d/n) + R{2d/3n) - 1, (14) 

where R{d/n) is the maximum rate of a binary [n, k, d] linear code. For example the 
sphere-packing bound is R{d/n) < 1 — H{d/2n); the codes we have discussed have 
parameters lying close to this bound (though in the limit of large n it is known that 
BCH codes are no longer efficient). Taking R{x) equal to the McEliece-Rodemich- 
Rumsey-Welch upper bound we find K/n > for d/n < 0.2197 in the limit 
of large n. This may be compared with d/n < 0.1825 for CSS codes and the limit 



d/n < 0.308 for pure quantum stabilizer codes discussed by Ashikhmin [^ 



The author is supported by the Royal Society and by St Edmund Hall, Oxford. 



8 



References 



For a general introduction to quantum information theory, see, for example, A. 
M. Steane, "Quantum computing". Rep. Prog. Phys., to be published (preprint 
|quant-ph/9708022| ). 

P. W. Shor, "Scheme for reducing decoherence in quantum computer memory," 
Phys. Rev. A, vol. 52, pp. R2493-R2496, Oct. 1995. 

A. M. Steane, "Error correcting codes in quantum theory," Phys. Rev. Lett., 
vol. 77, pp. 793-767, July 1996. 

A. R. Calderbank and P. W. Shor, "Good quantum error-correcting codes ex- 
ist," Phys. Rev. A, vol. 54, pp. 1098-1105, Aug. 1996. 

A. M. Steane, "Multiple particle interference and quantum error correction," 
Proc. Roy. Soc. Lond. A, vol. 452, pp. 2551-2577, Nov. 1996. 

A. R. Calderbank, E. M. Rains, P. W. Shor and N. J. A. Sloane, "Quantum 
error correction via codes over GF(4)", IEEE Trans. Information Theory, to 
be pubhshed. (LANL eprint |quant-ph/9608006| ). 



A. Ekert and C. Macchiavello, "Quantum error correction for communication," 
Phys. Rev. Lett, vol. 77, pp. 2585-2588, Sept. 1996. 

E. Knill and R. Lafiamme, "A theory of quantum error correcting codes," Phys. 
Rev. A, vol. 55, pp. 900-911, (1997). 

R. Lafiamme, C. Miquel, J. P. Paz and W. H. Zurek, "Perfect quantum error 
correcting code," Phys. Rev. Lett., vol. 77, pp. 198-201, July 1996. 

C. H. Bennett, D. P. DiVincenzo, J. A. Smohn and W. K. Wootters, "Mixed 
state entanglement and quantum error correction," Phys. Rev. A, vol. 54, pp. 
3822-3851, (1996). 

A. R. Calderbank, E. M. Rains, N. J. A. Sloane and P. W. Shor, "Quantum 
error correction and orthogonal geometry," Phys. Rev. Lett., vol. 78, pp. 405- 
409, (1997). 

A. M. Steane, "Simple quantum error correcting codes," Phys. Rev. A, vol. 54, 
pp. 4741-4751, (1996). 



9 



[13] D. Gottesman, "Class of quantum error-correcting codes saturating the quan- 
tum Hamming bound," Phys. Rev. A, vol. 54, pp. 1862-1868, (1996). 

E. M. Rains, "Nonbinary quantum codes," Preprint |quant-pli/9703048| . 

E. M. Rains, "Quantum codes of minimum distance two," Preprint |quant- 



ph/9704043| . 



A. M. Steane, "Quantum Reed-MuUer codes," IEEE Trans. Inf. Theory, to be 
published (preprint |quant-ph/9608026|) . 

D. Gottesman, "Pasting quantum codes," Preprint |quant-ph/9607027| . 

R. C. Bose and C. R. Ray-Chaudhuri, "On a class of error-correcting binary 
group codes," Information and Control, vol. 3, pp/ 68-79. 

A. Hocquenghem, "Codes correcteurs d'erreurs," Chiffres, vol 2, pp. 147-156, 
September, 1959. 

M. Grassl, Th. Beth and T. Pellizzari, "Codes for the quantum erasure channel," 
Phys. Rev. A, vol 56, pp. 33-38 (1997). 

F. J. MacWilliams and N. J. A. Sloane, The Theory of Error- Correcting Codes, 
Amsterdam: North-Holland, 1977. 

R. J. McEliece, E. R. Rodemich, H. C. Rumsey, Jr. and L. R. Welch, "New 
upper bounds on the rate of a code via the Delsart-MacWilliams inequalities," 
IEEE Trans. Inf. Theory, vol 23, pp. 157-166 (1977). 



A. Ashikhmin, "Remarks on bounds for quantum codes," preprint |quant- 
ph/97050371 . 



10 



n 


k 


k' 


d 


d' 


K 


D 


8 


4 


7 


4 


2 


3 


3 


1 fi 


1 1 




A 


9 
z 


1 n 


Q 

o 


32 


26 


31 


4 


2 


25 


3 




91 


9fi 


u 


4 


1 ^ 


u 




1 fi 


91 


s 
o 


u 


(J 


s 
o 






DO 


A 


9 




Q 

o 


fi4 


^1 


^7 


u 




44 


u 






■il 


c 
o 


u 


^^9 


Q 
o 


128 


120 


127 


4 


2 


119 


3 




1 1 


1 9n 


L) 




1 Q'l 


L) 




106 


1 1 3 


fi 

o 




Q1 


Q 

o 




QQ 


IT? 


1 n 


u 


S4 


Q 




Q9 




1 9 

1 z 


e 
o 


7n 


1 9 
±z 


19R 


oo 


QQ 




1 n 


ou 


14 


198 


78 


QQ 


16 


1 


4Q 


1 5 


256 


247 


255 


4 


2 


246 


3 


256 


239 


247 


6 


4 


230 


6 


256 


231 


239 


8 


6 


214 


8 


256 


223 


239 


10 


6 


206 


9 


256 


215 


231 


12 


8 


190 


12 


256 


207 


223 


14 


10 


174 


14 


256 


199 


223 


16 


10 


166 


15 



Table 1. Parameters [[n, of the quantum codes obtained from primitive 

binary BCH codes, for n < 256. The BCH codes have been extended by an overall 
parity check in order to allow the distance 3 quantum code to be obtained by com- 
bining a BCH code with the even weight code. For D > 3 if the unextended BCH 
codes are used, a. [[n — 1, K + 1, D — 1]] quantum code is obtained. 
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Table 2. As table 1, but for non-primitive BCH codes with n < 127. 
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